Remote VP, Information Security & Continuity

Bank of the Sierra; California, Northern (MO, KY); Hybrid; USD 80,000 - 100,000; Full time

Job summary

Bank of the Sierra is seeking a VP Information Security Manager to lead the physical security and business continuity programs while providing independent oversight of IT security controls. The role collaborates with IT, Operations, Risk Management, and senior leadership to align with regulatory expectations and industry best practices.

The position requires seven years in financial institution operations and information/cyber security, with deep knowledge of security frameworks and risk

Qualifications

• Bachelor's degree from an accredited college or university and a minimum of seven years of experience in financial institution operations and information/cyber security; or an equivalent combination of education and experience.
• Strong understanding of security frameworks and regulatory expectations (e.g., CRI, NIST CSF, FFIEC, GLBA, CCPA, PCI DSS).
• Advanced knowledge of bank operations, systems, products, and services.

Responsibilities

• Coordinate with leadership to ensure an effective physical security program at all locations.
• Develop and maintain a robust business continuity program including risk assessments and testing.
• Review and update information security policies and regulatory mappings to ensure alignment with risk appetite.
• Assist with audits and regulatory examinations; coordinate responses and remediation of deficiencies.
• Provide second-line input on third-party information security risk management and vendor due diligence.
• Prepare information security and physical security reports for Management and Board committees.

Skills

Security frameworks

Regulatory expectations

Banking information security

Analytical/problem-solving

Communication skills

Education

Bachelor's degree

Tools

Microsoft Office

Job description

Bank of the Sierra is seeking a VP Information Security Manager to lead the physical security and business continuity programs while providing independent oversight of IT security controls. The role collaborates with IT, Operations, Risk Management, and senior leadership to align with regulatory expectations and industry best practices.

The position requires seven years in financial institution operations and information/cyber security, with deep knowledge of security frameworks and risk